Information Security Analyst - 6 month contract

Just Energy; Mississauga; Hybrid; CAD 75,000 - 85,000; Full time

Job summary

A leading energy solutions provider is seeking an Information Security Analyst for a 6-month contract in Mississauga. This role involves monitoring security threats, managing compliance activities, and enhancing security protocols. Ideal candidates will have 2+ years of experience in Information Security, a degree in a related field, and strong knowledge of compliance standards. The position offers a hybrid working model and requires effective communication skills to interact with different stakeholders.

Qualifications

• 2+ years of experience in Information Security and advanced threat protection.
• Strong knowledge of IT infrastructure and networking.
• Understanding of patch management and vulnerabilities.

Responsibilities

• Identify and evaluate Information Security issues.
• Monitor emerging security threats and recommend strategies.
• Facilitate security risk management activities.

Skills

Information Security

Cybersecurity

Data Discovery

Data Classification

Network Penetration Testing

Risk Management

Incident Response

Compliance Standards

Education

BA or BS degree in Computer Science or IT

Tools

NIST Security Standard

PCI-DSS

OWASP Top Ten Vulnerabilities

Cisco Routers/Switches

SIEM tools

Job description

Information Security Analyst - 6 month contract

Join to apply for the Information Security Analyst - 6 month contract role at Just Energy

Information Security Analyst - 6 month contract

Join to apply for the Information Security Analyst - 6 month contract role at Just Energy

Title : Information Security Analyst, Contract

Location : Mississauga, Ontario (Hybrid)

Who We Are

Just Energy is a consumer company focused on essential needs, including electricity and natural gas; health and well-being, such as water quality and filtration devices; and utility conservation, bringing energy efficient solutions and renewable energy options to consumers. Currently operating in the United States and Canada, Just Energy serves both residential and commercial customers. Just Energy is the parent company of Amigo Energy, Filter Group Inc., Hudson Energy, Interactive Energy Group, and Tara Energy.

As the Information Security Analyst, Contract reporting to the Manager, IT Cyber and Information Security, you will foster strong relationships with business partners, including IT, internal audit, SOC vendors, and other compliance and risk stakeholders within Just Energy. In your capacity, you will effectively position your team to understand, articulate, and influence the IT Risk and Compliance (ITRC) strategy, plans, results, issues, and outcomes. As a project leader, you will frequently communicate with executives to represent and discuss IT risks and compliance positions, including consultation with the Manager of IT Cyber and IS. You will also lead efforts to govern, communicate, and educate staff on the adherence to risk and compliance policies, standards, processes, and procedures.

You will work in a highly complex, fast-paced matrixed environment, with tight deliverables, timelines and communications with multiple internal and external stakeholders to IT. We expect you to act independently and demonstrate strong initiative, influence outcomes, minimize and address conflicts, and demonstrate an in-depth understanding of risk management activities and business risks and control environments. The role requires a sense of urgency, passion for results, and personal accountability for achievement. The successful candidate must possess expertise in process, technology, and business acumen, along with strategic and innovative thinking and an unwavering focus on security and our customers. Your strong leadership and relationship skills, resilience, and ability to effectively communicate will be vital in driving results the right way in our entrepreneurial environment.

Key Responsibilities

• Identification of Information Security issues.
• Participate in the development of security architecture solutions.
• Monitor emerging security threats and evaluate and recommend mitigation strategies.
• Maintain necessary documentation to support security strategy by outlining the requirements and benefits of specific security tools and / or solutions.
• Document and communicate security incidents, vulnerabilities, and the current state of the system.
• Facilitate security risk management activities, advise on threats, vulnerabilities, and mitigation strategies.
• Daily Scanning, Implementing, and maintaining information security tools and documentation.
• Provide support to internal teams with security concerns.
• Responsible for spam prevention and monthly vulnerability Scanning
• Working with third party companies to resolve spam complaints, and backlisting.
• Supporting the annual external audit
• Responsible for updating Blocklists and Allow lists for our various in-house rules.
• Monitor information security requirements, policies, and compliance.
• Document and communicate security incidents, vulnerabilities, and the current state of the system.
• Facilitate security risk management activities, advise on threats, vulnerabilities, and mitigation strategies.
• Daily Scanning, Implementing, and maintaining information security tools and documentation.
• Provide support to internal teams with security concerns and with security incident response.
• Working with third party companies to resolve spam complaints and blacklistings.
• Supporting the annual external audit
• Perform other duties as assigned.

Qualifications

2+ years of experience in Information Security, Cybersecurity, and advanced threat protection.

2+ years of experience with Data Discovery and Data Classification strategies.

BA or BS degree in CS or IT preferred Computer Science or Engineering or related field.

Experience in information security covering, Infrastructure, Web applications, software development, cloud, System, and Network Operating systems.

Strong knowledge of IT infrastructure, networking, applications, databases, and both Windows and Linux operating systems.

Experience with computer network penetration testing and techniques.

Ability to identify and mitigate network, web application, and software development vulnerabilities and explain how to avoid them.

Understanding of patch management with the ability to deploy patches promptly while understanding business impact.

Working knowledge of the following IT Compliance, Standards, and Frameworks :

National Institute of Standards and Technology (NIST) Security Standard

Cybersecurity and Information Security

Payment Card Industry Data Security Standard (PCI-DSS) requirement.

Open Web Application Security Project (OWSAP) Top Ten Vulnerabilities

Common Vulnerabilities and Exposures / Weaknesses

ISACA -COBIT for Information Security

Microsoft Windows Server / Workstation administration and security

Application and Network Penetration Testing with one or more of these products (Rapid7, Veracode, Qualys, etc.)

Administration / Security of Cisco Routers / Switches and other WAN / LAN / WLAN / VPN / Firewall Technologies

Defender, DLP FIM, SIEM and endpoint security management

Working experience with the following tools – IDPS, MITRE, SIEM, SOAP, WS Security, PowerShell, and Python scripting

Professional Certificates And Registration Required

CISSP / GIAC / CCSP certification will be nice to have or work toward any of them.

Working knowledge of the following domains will be a plus.

ISO IEC 27001 L.A (ISMS)

Certified Ethical Hacker (CEH)

Qualys Certified Specialist (QCS)

Cisco Certified Network Professional (CCNP) / Cisco Certified Network Associate (CCNA)

Microsoft Certified IT Professional (MCITP)

Microsoft Certified Systems Administrator (MCSA)

Microsoft Certified Technology Specialist (MCTS)

Understanding Knowledge of the following standards and frameworks will be an advantage.

Knowledge of Microsoft O / S, Identity Management and AD, Azure AD, ADFS

Good understanding of Network equipment, O / S, and configuration. Cisco IOS, NX-OS, Palo Alto Firewalls, Meraki

Working knowledge of IT standards – ISO27001 and ITIL, Framework -, NIST, OWSAP

Knowledge of routing protocols (OSPF, BGP, IGRP / EIGRP) and MPLS.

Fundamental knowledge of IP-based applications and experience with security threats and security tools to mitigate the impacts of those threats preferred.

Just Energy and its subsidiaries are an equal opportunity employer. We are committed to building a workforce that reflects the communities we serve and to promote a diverse, anti-racist, inclusive, accessible, merit-based, respectful and equitable workplace. We invite all interested individuals to apply.

Primary Location

CA-ON-Mississauga

Information Technology

Organization

Canada

Schedule

Temporary

Shift

Temporary Work

Employee Status

Non-Management

Job Type

Full-time

Job Level

Day Job

Travel

Seniority level

Seniority level

Associate

Employment type

Employment type

Full-time

Job function

Job function

Information Technology

Industries

Oil and Gas

Referrals increase your chances of interviewing at Just Energy by 2x

Sign in to set job alerts for “Information Security Analyst” roles.

Richmond Hill, Ontario, Canada 1 month ago

Mississauga, Ontario, Canada 22 hours ago

Toronto, Ontario, Canada CA$80.00-CA$100.00 4 weeks ago

Richmond Hill, Ontario, Canada CA$103,967.00-CA$120,603.00 1 week ago

Security Analyst – Project REACH - Temporary Full-Time 2025-13849 (2025-13849)

Toronto, Ontario, Canada CA$75,000.00-CA$85,000.00 2 weeks ago

Senior Security Analyst - Cyber and Security Staff - Regular Full-time 2024-10969 (2024-10969)

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.

J-18808-Ljbffr